AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2010-2235

HIGH · CVSS 8.5 EPSS 3.33%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-12-09 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2010-2235
Severity
HIGH
CVSS
8.5
EPSS
3.33%

Original Filing — NVD Description

template_api.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated administrators to execute arbitrary code via a crafted kickstart template file, a different vulnerability than CVE-2008-6954.